Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft
File:                     VwO1XNjigCKWBKELyM9bOAERY_o.mft (raw, json)
Hash identifier:          pbJw+pNo9HR283D3DjmIiefsm1BntblQlKBPLsaI8Zk=
Subject key identifier:   15:F3:25:D5:90:DB:E7:6B:03:21:C1:42:79:FA:80:FE:D1:34:82:78
Authority key identifier: 57:03:B5:5C:D8:E2:80:22:96:04:A1:0B:C8:CF:5B:38:01:11:63:FA
Certificate issuer:       /CN=A9183EB3/serialNumber=5703B55CD8E280229604A10BC8CF5B38011163FA
Certificate serial:       0A92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft
Manifest number:          0A8B
Signing time:             Fri 22 Aug 2025 19:42:10 +0000
Manifest this update:     Fri 22 Aug 2025 19:42:09 +0000
Manifest next update:     Fri 29 Aug 2025 19:42:09 +0000
Files and hashes:         1: VwO1XNjigCKWBKELyM9bOAERY_o.crl (hash: d8N9wAekm9wisnD5oEuc149kGsDfiov3sGxd6k3COwQ=)
                          2: D67C31E8637511EA8A698E0BC4F9AE02.roa (hash: 0G9HtTLZBqQUwE8UGiq72iqUjTtI4Gz6+fEdMQN9vkU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.crl
                          rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 19:42:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2706 (0xa92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183EB3, serialNumber=5703B55CD8E280229604A10BC8CF5B38011163FA
        Validity
            Not Before: Aug 22 19:42:09 2025 GMT
            Not After : Aug 29 19:42:09 2025 GMT
        Subject: CN=68a8c811-1098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6c:f6:23:c1:17:7a:a9:bc:08:d0:97:37:30:
                    4b:c0:b6:82:40:63:b7:de:03:18:47:9b:62:e6:df:
                    40:80:1b:d9:a6:ea:6b:3a:1a:c5:15:20:cc:3d:91:
                    81:42:96:1e:5d:87:3d:3f:9a:dd:5b:f5:c4:ca:14:
                    91:cc:75:5c:80:aa:34:05:97:9e:3c:0b:4b:7c:b2:
                    ed:0a:dd:25:bd:08:46:8d:b0:28:b6:af:03:f3:98:
                    d6:04:cd:f6:f8:c5:7a:09:c4:54:9c:d2:2f:91:bb:
                    6e:c9:dd:a8:75:0b:28:7d:ab:22:20:72:80:9c:79:
                    df:ab:17:e9:fc:e8:09:6d:c4:34:69:2d:3c:66:bc:
                    c2:77:26:40:4c:14:57:51:b6:69:8a:a0:c3:d1:20:
                    95:de:c5:db:b1:d0:0e:ff:1c:b4:77:4d:24:ce:e7:
                    b1:91:e6:f0:f7:e4:4a:72:06:0e:c8:61:d1:4f:a8:
                    21:8d:23:fa:af:a8:17:16:8b:47:dd:11:81:29:c3:
                    fa:e4:b9:ec:7a:4c:a9:ed:38:1d:e6:3e:89:40:41:
                    10:67:cc:73:19:b4:ed:d1:21:bf:a6:06:48:8a:e0:
                    92:d1:44:9e:8b:e8:66:5a:b0:0b:2c:a4:51:ed:6d:
                    5e:e4:1d:88:a5:7d:a9:9f:ad:1f:54:ef:a7:ba:f7:
                    b5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F3:25:D5:90:DB:E7:6B:03:21:C1:42:79:FA:80:FE:D1:34:82:78
            X509v3 Authority Key Identifier:
                keyid:57:03:B5:5C:D8:E2:80:22:96:04:A1:0B:C8:CF:5B:38:01:11:63:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ee:17:4e:f6:a8:ba:2f:be:80:e6:b5:15:03:40:1a:67:dc:
         94:e7:af:34:64:02:cf:f9:38:a3:11:bc:92:77:d6:10:9f:b1:
         31:2f:51:2d:46:ac:22:c3:a4:d7:78:b8:cd:9e:c8:0f:ec:d5:
         b4:b9:28:ec:30:f4:41:0f:ed:81:0e:cd:7a:24:d0:9c:60:49:
         ff:4d:ab:5a:9d:ef:a6:19:15:a6:a5:cf:07:b3:3e:75:da:66:
         5e:ff:e1:81:52:6f:7b:1f:95:5f:e1:07:86:80:3d:90:f0:6e:
         67:6c:e1:11:36:0f:45:ff:6b:8a:17:58:ba:e3:89:8d:1f:53:
         8c:a4:91:03:85:17:ea:d8:35:3f:97:66:24:29:e9:75:46:40:
         7b:1e:7a:77:b6:41:68:71:9f:86:6f:bd:92:00:2e:a5:3b:b6:
         44:1b:06:1e:38:9c:5d:21:7a:19:0b:e6:d5:9c:89:28:ce:fa:
         a0:0d:df:1c:87:c3:ac:ed:e4:af:db:48:e6:73:78:80:e0:f9:
         02:1d:ab:ef:fe:4e:e7:ca:4b:08:81:78:85:43:5c:60:16:1d:
         10:c5:83:e2:2e:f4:89:21:cb:9c:f4:38:9d:7f:cd:0f:68:ce:
         50:2e:8d:e7:68:3b:31:1b:ed:d1:2e:8f:1e:2f:da:7b:af:ca:
         cc:0a:5e:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNFQjMxMTAvBgNVBAUTKDU3MDNCNTVDRDhFMjgwMjI5NjA0QTEwQkM4Q0Y1QjM4
MDExMTYzRkEwHhcNMjUwODIyMTk0MjA5WhcNMjUwODI5MTk0MjA5WjAYMRYwFAYD
VQQDEw02OGE4YzgxMS0xMDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArWz2I8EXeqm8CNCXNzBLwLaCQGO33gMYR5ti5t9AgBvZpuprOhrFFSDMPZGB
QpYeXYc9P5rdW/XEyhSRzHVcgKo0BZeePAtLfLLtCt0lvQhGjbAotq8D85jWBM32
+MV6CcRUnNIvkbtuyd2odQsofasiIHKAnHnfqxfp/OgJbcQ0aS08ZrzCdyZATBRX
UbZpiqDD0SCV3sXbsdAO/xy0d00kzuexkebw9+RKcgYOyGHRT6ghjSP6r6gXFotH
3RGBKcP65Lnsekyp7Tgd5j6JQEEQZ8xzGbTt0SG/pgZIiuCS0USei+hmWrALLKRR
7W1e5B2IpX2pn60fVO+nuve1BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXzJdWQ
2+drAyHBQnn6gP7RNIJ4MB8GA1UdIwQYMBaAFFcDtVzY4oAilgShC8jPWzgBEWP6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0VCMy8zREI2QTM2MjYz
NzUxMUVBQjlDMzY4MEJDNEY5QUUwMi9Wd08xWE5qaWdDS1dCS0VMeU05Yk9BRVJZ
X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Z3TzFYTmppZ0NLV0JLRUx5TTliT0FFUllfby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
M0VCMy8zREI2QTM2MjYzNzUxMUVBQjlDMzY4MEJDNEY5QUUwMi9Wd08xWE5qaWdD
S1dCS0VMeU05Yk9BRVJZX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBT7hdO9qi6L76A5rUVA0AaZ9yU5680ZALP+TijEbySd9YQn7ExL1Et
Rqwiw6TXeLjNnsgP7NW0uSjsMPRBD+2BDs16JNCcYEn/Tatane+mGRWmpc8Hsz51
2mZe/+GBUm97H5Vf4QeGgD2Q8G5nbOERNg9F/2uKF1i644mNH1OMpJEDhRfq2DU/
l2YkKel1RkB7Hnp3tkFocZ+Gb72SAC6lO7ZEGwYeOJxdIXoZC+bVnIkozvqgDd8c
h8Os7eSv20jmc3iA4PkCHavv/k7nyksIgXiFQ1xgFh0QxYPiLvSJIcuc9Didf80P
aM5QLo3naDsxG+3RLo8eL9p7r8rMCl6v
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:40:57 2025 by rpki-client